Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030323a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a373030323a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          cw/VF80XmNraIXAUov0dV1p97hiafRJM4tkHIzG0YCg=
Subject key identifier:   B8:78:C1:EA:0E:FA:E2:79:AD:A9:5B:20:DB:4B:72:56:F3:2B:B8:8E
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       6900647862D617C2F5E78FD8FFBAE4D897D472A2
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030323a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Thu 04 Apr 2024 16:45:48 +0000
ROA not before:           Thu 04 Apr 2024 16:40:48 +0000
ROA not after:            Thu 03 Apr 2025 16:45:48 +0000
asID:                     266437
IP address blocks:        2804:37d0:7002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:00:64:78:62:d6:17:c2:f5:e7:8f:d8:ff:ba:e4:d8:97:d4:72:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Apr  4 16:40:48 2024 GMT
            Not After : Apr  3 16:45:48 2025 GMT
        Subject: CN=B878C1EA0EFAE279ADA95B20DB4B7256F32BB88E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:6c:54:6b:08:9e:26:11:fa:74:f1:34:cc:
                    e9:8e:a6:5b:9a:be:37:81:3a:50:30:30:5a:dc:ac:
                    f5:ab:ef:1d:eb:78:e0:62:a9:f3:f0:8c:18:16:f8:
                    eb:d8:2e:6a:3d:c9:94:5f:12:83:24:b2:04:35:72:
                    62:22:34:bc:97:ca:ba:7a:a2:47:ea:d7:51:84:6d:
                    28:f7:44:2e:72:95:51:f0:d1:68:d8:84:60:2a:e3:
                    f9:d0:51:77:77:61:c0:e6:df:30:02:ad:df:6c:10:
                    f5:7c:a7:e1:09:8c:5c:a4:6d:c4:3a:ff:0f:ad:f8:
                    67:b2:54:a6:6e:21:e5:77:2a:42:05:58:c8:f1:8a:
                    ff:2a:6e:79:8a:fa:20:32:6f:47:b7:fb:b3:40:2e:
                    b0:1f:09:99:1a:76:54:48:cd:8d:b4:ef:73:2b:28:
                    87:6d:91:38:c8:4b:b5:04:68:a8:5d:ab:c9:69:6d:
                    1c:3d:8b:d7:c1:1c:e9:a7:42:ba:dd:a1:92:ba:e2:
                    cb:01:31:b7:34:42:9a:9e:66:9f:78:55:d4:20:18:
                    b7:9b:7b:24:5f:5e:18:e2:d0:99:be:76:1d:6a:7e:
                    cb:e3:d8:a4:e9:6a:82:96:eb:84:4e:bf:33:fa:ed:
                    54:49:10:e6:94:af:dc:d6:e9:d3:bc:9a:f9:9c:c3:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:78:C1:EA:0E:FA:E2:79:AD:A9:5B:20:DB:4B:72:56:F3:2B:B8:8E
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030323a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:3d:84:82:c0:0f:15:64:3e:38:ec:88:c1:7e:56:0c:97:e5:
         91:57:2b:74:4f:ce:79:74:26:7c:81:a5:bb:5d:ff:f5:c9:01:
         e8:66:dd:e7:b4:aa:f3:72:ce:20:97:41:54:92:33:cc:96:69:
         89:34:5b:73:bd:70:cb:ac:0d:c0:ce:66:c9:aa:97:33:91:80:
         1f:b9:84:6d:18:a1:df:7f:05:ad:30:a4:d2:1e:f5:78:ca:2a:
         7d:37:cd:5b:32:fe:83:de:82:23:4b:02:de:4e:bf:d4:15:c4:
         84:15:9d:81:9a:8d:e7:63:18:f4:92:a9:6b:60:53:4f:b3:b2:
         3f:b2:3d:6e:c5:02:e9:56:42:7b:ea:47:1c:cf:df:27:65:ff:
         d7:23:ee:4c:54:64:7b:b1:bc:a1:81:e2:a2:46:2c:a0:b2:e1:
         38:56:3a:36:ee:f9:b9:61:79:7d:b2:bb:c3:1b:07:9d:67:59:
         b3:41:2a:08:df:10:19:ac:4a:6e:28:12:71:35:6a:e9:12:be:
         d2:9d:f8:ad:5a:25:e2:24:6b:48:bd:61:22:9f:3c:db:f1:31:
         d3:b1:12:0a:ff:2a:6d:63:5a:04:2e:41:bd:40:8a:87:54:72:
         9e:2e:92:4f:26:72:85:2c:1a:30:f7:a2:cd:71:fc:4f:a1:d4:
         18:3f:b7:59
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUaQBkeGLWF8L154/Y/7rk2JfUcqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNCMjE1MkE4RjQ0QkMwQjMwNjUwQjIwMEQ4QTNCQTY3
M0QzNzRGRDAeFw0yNDA0MDQxNjQwNDhaFw0yNTA0MDMxNjQ1NDhaMDMxMTAvBgNV
BAMTKEI4NzhDMUVBMEVGQUUyNzlBREE5NUIyMERCNEI3MjU2RjMyQkI4OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNK2xUawieJhH6dPE0zOmOplua
vjeBOlAwMFrcrPWr7x3reOBiqfPwjBgW+OvYLmo9yZRfEoMksgQ1cmIiNLyXyrp6
okfq11GEbSj3RC5ylVHw0WjYhGAq4/nQUXd3YcDm3zACrd9sEPV8p+EJjFykbcQ6
/w+t+GeyVKZuIeV3KkIFWMjxiv8qbnmK+iAyb0e3+7NALrAfCZkadlRIzY2073Mr
KIdtkTjIS7UEaKhdq8lpbRw9i9fBHOmnQrrdoZK64ssBMbc0QpqeZp94VdQgGLeb
eyRfXhji0Jm+dh1qfsvj2KTpaoKW64ROvzP67VRJEOaUr9zW6dO8mvmcw2t7AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUuHjB6g764nmtqVsg20tyVvMruI4wHwYDVR0j
BBgwFoAUHLIVKo9EvAswZQsgDYo7pnPTdP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01QcFZvS3FGTVNTMmU0WXVwc3QyN0RXMTgyQ3ZwckM0a2p3U3NaVThB
YVgvMS8xQ0IyMTUyQThGNDRCQzBCMzA2NTBCMjAwRDhBM0JBNjczRDM3NEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDQjIxNTJBOEY0NEJDMEIz
MDY1MEIyMDBEOEEzQkE2NzNEMzc0RkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNUHBWb0txRk1TUzJlNFl1cHN0MjdEVzE4MkN2cHJDNGtqd1NzWlU4QWFYLzEv
MzIzODMwMzQzYTMzMzc2NDMwM2EzNzMwMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNjM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEN9BwAjANBgkqhkiG9w0BAQsF
AAOCAQEAiT2EgsAPFWQ+OOyIwX5WDJflkVcrdE/OeXQmfIGlu13/9ckB6Gbd57Sq
83LOIJdBVJIzzJZpiTRbc71wy6wNwM5myaqXM5GAH7mEbRih338FrTCk0h71eMoq
fTfNWzL+g96CI0sC3k6/1BXEhBWdgZqN52MY9JKpa2BTT7OyP7I9bsUC6VZCe+pH
HM/fJ2X/1yPuTFRke7G8oYHiokYsoLLhOFY6Nu75uWF5fbK7wxsHnWdZs0EqCN8Q
GaxKbigScTVq6RK+0p34rVol4iRrSL1hIp882/Ex07ESCv8qbWNaBC5BvUCKh1Ry
ni6STyZyhSwaMPeizXH8T6HUGD+3WQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org